reported in forums:
I noticed that if an user have multiples assigned roles he can approve a workflow if at least one of the roles he has can approve the document. But, if the records of the tab User Roles are inactive the system still consider that the user has permision to approve.
I checked the code for the class MWFActivity and it is not being verified that the registry is active. I attach the patch with the propose fix.